Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cbffa2b-acc6-366c-895d-940bdca46466.roa
File: 5cbffa2b-acc6-366c-895d-940bdca46466.roa (raw, json)
Hash identifier: /JIsYCJsrgtwrk88Lf2+ycDedlCf92+cDjpG3Euimsg=
Subject key identifier: F7:A8:8E:21:59:7C:11:88:8B:B1:A2:3B:FD:4E:9E:E7:DF:A2:E3:90
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A0625E0C15C2B452DC940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cbffa2b-acc6-366c-895d-940bdca46466.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.217.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:06:25:e0:c1:5c:2b:45:2d:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b2ae2b6e-b69d-4fbe-b72f-56e7b4ad689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:7c:4a:5d:cd:42:e0:2f:23:cb:d1:57:8a:
93:61:f1:a9:be:80:45:1d:0d:c6:23:9d:fa:4e:8d:
65:34:88:b4:fd:3d:f5:d3:c3:94:30:72:2a:f1:4d:
38:99:42:0a:83:0c:76:75:d2:60:ad:a4:7b:a2:af:
d7:f3:b5:75:15:c8:18:c5:43:e8:e4:87:bc:fd:5f:
f1:0a:83:a2:5d:2d:9c:83:cb:c8:71:5b:0d:8a:94:
87:eb:7b:91:3a:9c:7c:93:a2:f6:fa:63:79:f2:13:
3f:e4:e0:fa:a6:b7:b8:a9:ac:b6:b1:a1:4f:74:58:
71:af:f6:79:53:ed:5e:dd:d2:8c:54:5d:f9:bd:bb:
1e:34:1a:b9:76:f2:e6:72:04:bf:9a:01:9d:4c:9e:
6d:68:8c:c3:49:7d:a1:78:9e:bc:27:d1:60:31:45:
56:7c:09:ab:46:ba:52:29:3a:4f:1a:be:a7:30:28:
51:72:47:43:29:fa:4a:99:a0:f9:8b:0b:3e:e6:43:
b5:2a:8e:03:be:70:e7:ba:cb:e0:3c:d8:20:e2:ba:
07:64:bc:2c:60:0b:42:8c:11:ce:94:40:e0:8c:97:
6e:f7:bb:3e:91:cb:32:f1:c5:3b:ad:e0:9e:7f:db:
72:b5:2e:29:51:48:4e:4f:27:8a:5e:00:75:68:e0:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:8E:21:59:7C:11:88:8B:B1:A2:3B:FD:4E:9E:E7:DF:A2:E3:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5cbffa2b-acc6-366c-895d-940bdca46466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.217.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:97:90:74:96:30:07:0c:b1:e9:23:5b:9a:61:42:55:91:c3:
b5:2f:93:65:89:f4:2b:48:1c:48:5b:4b:31:69:53:85:85:06:
36:73:00:17:fa:1b:1f:ff:eb:e1:a1:e7:00:46:21:9d:93:6b:
5d:cc:b1:b8:1a:8a:0b:1e:d3:15:93:f3:f3:4c:e7:ed:01:ad:
c9:8d:93:20:c1:e8:1a:05:76:ef:d7:e0:00:19:3a:cd:c1:e2:
d5:28:74:b7:76:33:32:8f:96:a4:84:11:07:a9:72:d9:61:3e:
56:f6:82:53:40:6f:d5:c9:32:a8:6c:b2:d3:ee:11:3d:1d:6f:
58:97:ef:90:13:da:3a:95:ca:8a:81:ea:ba:d3:6f:c8:bf:b0:
f8:d2:17:b6:43:56:2a:a2:bf:d6:dc:3d:1a:32:c5:d2:d7:68:
5d:5a:db:0c:83:a6:f7:96:72:12:b3:73:77:5a:35:af:dc:09:
8a:d3:07:b9:16:df:60:2b:45:a9:76:0e:55:92:93:55:6d:18:
f9:bd:54:75:be:e9:c4:2e:fe:d7:d6:85:71:8d:ec:fc:41:2a:
b4:c0:a9:6b:a2:76:70:04:dd:96:02:05:59:b4:df:e9:b4:58:
94:db:e7:45:db:3c:5a:a6:74:3a:d9:07:48:99:78:38:d0:ea:
38:96:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:46:22 2025 by rpki-client